SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
RecargaPay, a regulated fintech, is seeking a technical leader to drive the company's information security governance framework. This role encompasses policies and standards, risk management, business continuity, audit and regulatory compliance, and identity and access governance (SailPoint, Google Workspace, AWS IAM)—including non-human identities and privileged access—with automation via N8N.
In a regulated fintech environment, every control must be defined, executed, measured, and evidenced. You will provide technical direction to a team of analysts who operationalize this governance.
Key Responsibilities:
- Own identity and access governance: lifecycle management (joiner/mover/leaver), SailPoint certifications, RBAC, segregation of duties (SoD), least privilege, and access controls across Google Workspace and AWS IAM.
- Govern non-human identities (service accounts, API keys, tokens, application credentials) and privileged access (admin accounts, just-in-time access, break-glass accounts): maintain inventory with defined ownership, lifecycle, credential rotation, and recurring reviews.
- Direct N8N automations (provisioning, approvals, notifications, integrations between SailPoint, Google Workspace, AWS, and HR/ITSM systems) to eliminate manual work and generate audit evidence.
- Produce governance metrics and reports (access SLAs, orphaned accounts, privileged access status, risk status, continuity test results, audit findings) and present to CISO and leadership.
- Provide technical leadership to the Analyst team: set priorities, define technical standards, review deliverables, provide feedback, and develop team members.
- Maintain the SI governance framework (policies, standards, procedures) and conduct SI and third-party risk management: assessments, action plans, remediation tracking, and reporting to CISO and committees.
- Own business continuity management: impact analysis (BIA), continuity and recovery plans, periodic testing, and lessons-learned tracking, aligned to ISO 22301.
- Lead compliance and audit readiness (ISO 27001, ISO 22301, Central Bank regulations): controls, evidence, audit responses, and tracking findings to closure.
Requirements:
- Hands-on experience with identity and access management using SailPoint (IdentityIQ or Identity Security Cloud), Google Workspace (advanced administration), and AWS IAM (policies, roles, federation/SSO).
- Deep knowledge of non-human identities: service accounts, API keys, tokens, secrets, workload identities; inventory management, ownership, credential rotation, and secure deprovisioning.
- Experience with privileged access and admin accounts: least privilege, segregation between admin and personal accounts, just-in-time access, break-glass accounts, monitoring, and periodic privilege reviews.
- Mastery of access concepts (RBAC/ABAC, SoD, SSO, SAML/OIDC, SCIM, MFA) and familiarity with N8N automation (or equivalent platforms), REST APIs, webhooks, and JSON.
- Ability to communicate risks and results to CISO, committees, and business stakeholders.
- Proven experience in information security governance, risk, and compliance (GRC): policies, standards, controls, and internal/external audit cycles.
- Experience in business continuity management: BIA, BCP/DR planning, and test execution. Knowledge of applicable frameworks and regulations (ISO 27001, ISO 22301, Central Bank norms).
- Technical team leadership experience: setting priorities, reviewing analyst work, providing feedback, and developing people.
Desirables:
- Access control for internal AI: identities and permissions for AI agents and applications, access scope to tools/integrations/data, and audit trails of executed actions.
- Certifications: CISSP, CISM, CRISC, ISO 27001 Lead Auditor, ISO 22301 (Lead Implementer or Lead Auditor), SailPoint, or AWS Security Specialty.
- Experience with PAM/secrets management and IaC (e.g., Terraform) applied to IAM.
- Technical English for reading and vendor communication.
